Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/C124669A0CD811F1BF03794C353D8C67.roa
File:                     C124669A0CD811F1BF03794C353D8C67.roa (raw, json)
Hash identifier:          JmGOQnf086asKVzxurpws0iw+6+n5msjTrY6CkFGdY8=
Subject key identifier:   3F:05:D2:8E:CE:2E:32:F7:DA:0B:62:51:B1:00:14:18:DD:8F:FA:89
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       02EA
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/C124669A0CD811F1BF03794C353D8C67.roa
Signing time:             Sun 01 Mar 2026 18:18:23 +0000
ROA not before:           Wed 18 Feb 2026 14:47:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151352
IP address blocks:        103.1.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl
                          rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746 (0x2ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F, serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Feb 18 14:47:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a482ef-9b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:d9:d4:f3:e5:2b:ba:a9:02:36:2e:c0:62:
                    5b:7a:8d:2c:7a:8b:08:7d:14:a9:ad:c7:47:a3:bc:
                    b1:73:75:b1:bb:28:84:2f:4d:22:1b:eb:fa:8e:61:
                    a6:f6:79:24:36:7f:73:01:b8:2c:30:51:ea:9d:5e:
                    3f:b6:50:75:95:28:f1:1a:ee:46:b1:27:4a:80:e4:
                    89:c9:0a:2b:43:f0:3f:23:25:f7:d2:36:47:db:78:
                    bc:ab:04:c5:f9:45:22:7d:ed:cd:dd:aa:1a:4d:ad:
                    50:28:01:be:d5:09:7e:db:5f:70:77:b3:63:6b:f0:
                    36:12:19:6e:53:35:95:2a:4c:20:90:02:a8:57:83:
                    74:0f:15:69:39:75:1b:e0:76:4e:c8:df:1c:f6:f8:
                    b5:de:0c:ad:5e:1c:bc:b1:26:37:11:df:94:82:bf:
                    b0:f9:d0:a0:a5:25:85:79:7c:15:62:f5:ee:71:fe:
                    3d:9e:b9:86:74:1b:0b:e7:e8:a1:87:e6:3d:09:96:
                    3a:4f:62:4e:65:dc:d2:d8:ec:21:9c:c2:e0:6b:f6:
                    2b:ea:0f:13:b7:68:93:53:64:2d:c0:8c:b7:24:11:
                    2e:0f:64:f6:d5:ca:b6:6e:5f:24:ac:0f:e3:99:9a:
                    e7:f0:dc:8e:05:5c:23:c1:70:aa:45:02:b4:af:1b:
                    29:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:05:D2:8E:CE:2E:32:F7:DA:0B:62:51:B1:00:14:18:DD:8F:FA:89
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/C124669A0CD811F1BF03794C353D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:9f:c0:06:04:14:60:e1:96:be:72:b1:e9:d1:42:e5:b8:
         a5:c0:93:a6:45:0b:65:17:fd:5d:42:4d:d3:00:b5:cc:c7:fa:
         dd:d6:3e:0d:1e:60:d2:ea:35:5d:fa:01:bd:35:c6:c9:ec:e8:
         fd:23:e8:08:97:51:76:31:f9:c0:da:e1:09:77:80:cd:17:76:
         80:ec:cf:ca:e2:8d:0d:ce:d4:38:75:e1:19:a8:43:59:e1:3d:
         c7:cb:c7:4f:8c:29:4f:ce:15:b6:38:13:39:90:45:d5:a0:0b:
         3b:c1:7a:2c:1d:4b:b8:ba:a9:6b:97:18:58:ef:40:7d:2f:db:
         45:fc:3b:a0:f4:f9:8b:8e:26:a6:b5:c9:95:07:5b:dd:23:68:
         49:3f:87:1d:16:39:22:ec:bc:78:61:2e:1d:94:20:e1:28:d7:
         02:70:bc:35:31:81:f5:e7:fb:5e:12:40:e0:81:53:6c:60:0a:
         d8:79:92:68:b6:68:63:4b:79:8d:3b:ed:6e:9d:32:b2:88:af:
         8f:13:41:75:6e:63:a5:c1:4a:e7:6a:a4:2c:39:aa:e1:29:73:
         bc:7c:ec:7e:9d:67:31:37:41:33:64:e2:f2:ae:6f:53:59:2a:
         91:48:47:ee:d6:9d:87:72:96:92:93:70:2e:b1:ee:ab:a2:c8:
         2d:1d:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:57:44 2026 by rpki-client